Vendors / Mywebsql Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 0
Exploited now Mywebsql records in CISA KEV No Mywebsql vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 49
MyWebSQL 3.7 has a remote code execution (RCE) vulnerability after an attacker writes shell code into the database, and executes the Backup Database function with a .php filename for the backup's archive file.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04221 · Published 2019-02-11 · No fix listed CWE-706
Priority LOW 28
MyWebSQL version 3.6 is vulnerable to stored XSS in the database manager component resulting in account takeover or stealing of information
CVSS 3.0 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00723 · Published 2017-07-13 · No fix listed CWE-79
Priority LOW 26
MyWebSQL 3.7 has a Cross-site request forgery (CSRF) vulnerability for deleting a database via the /?q=wrkfrm&type=databases URI.
CVSS 3.0 MEDIUM 5.7· Network · Low privileges · User interaction · EPSS 0.00443 · Published 2019-02-11 · No fix listed CWE-352
Priority LOW 26
An issue was discovered in MyWebSQL 3.7.
CVSS 3.0 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00667 · Published 2019-02-06 · No fix listed CWE-79
Priority LOW 24
Cross-site scripting (XSS) vulnerability in MyWebSQL 3.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the table parameter to index.php.
CVSS 2.0 MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01854 · Published 2014-09-12 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
1 0 4 0 0
THREATIST.IORead the docs